Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a383230303a3a2f33392d3339203d3e20323033303639.roa
File:                     326130363a313238373a383230303a3a2f33392d3339203d3e20323033303639.roa (raw, json)
Hash identifier:          Gjf2ph9hxgNOqeFUsuhOdiIsV+JYL0TYpNjTSNIeLt0=
Subject key identifier:   CA:D3:D9:A5:5A:E2:0F:D3:B7:6A:BB:18:14:64:96:37:F9:72:0D:8F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       467D991C7111FD8CC22080A05BAB0148FBF2A25D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a383230303a3a2f33392d3339203d3e20323033303639.roa
Signing time:             Fri 14 Apr 2023 02:06:41 +0000
ROA not before:           Fri 14 Apr 2023 02:01:41 +0000
ROA not after:            Fri 12 Apr 2024 02:06:41 +0000
asID:                     203069
IP address blocks:        2a06:1287:8200::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:99:1c:71:11:fd:8c:c2:20:80:a0:5b:ab:01:48:fb:f2:a2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:01:41 2023 GMT
            Not After : Apr 12 02:06:41 2024 GMT
        Subject: CN=CAD3D9A55AE20FD3B76ABB1814649637F9720D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:87:ee:cf:ab:f7:91:51:07:9f:bc:73:ae:
                    27:58:41:3f:0d:cc:b5:2e:93:cd:80:6a:09:3a:b7:
                    91:34:91:b5:c4:ce:1d:23:04:53:78:58:c6:53:d8:
                    01:5f:b9:77:bc:1d:30:3e:65:6c:44:63:5b:2f:c3:
                    ca:66:89:8d:09:99:da:d8:e9:1e:09:92:88:81:33:
                    65:2c:e4:34:8e:af:44:87:50:bf:75:13:48:44:46:
                    f0:5b:d2:50:71:bb:54:ea:96:ad:e4:7c:16:9d:37:
                    88:11:b9:19:66:02:a9:e9:5a:35:29:bf:ee:9d:ed:
                    e7:8a:17:4d:ae:92:08:6e:cc:c0:14:24:ac:31:10:
                    0c:eb:ad:fc:e7:89:c5:a4:8c:d2:86:f3:7c:a9:7f:
                    b7:cc:d1:9f:33:cb:e5:0c:77:ab:05:20:8b:80:69:
                    71:4c:2e:ba:f6:c7:af:06:7a:33:f2:f0:76:e7:76:
                    7c:14:b7:f6:d3:52:4d:41:8f:d0:e3:e1:10:0e:00:
                    0b:32:2c:b1:68:07:8e:ee:75:f7:a9:e3:5a:fd:44:
                    b5:35:5f:2d:9d:e5:73:f3:a9:6c:f3:96:48:16:01:
                    73:c5:01:df:63:26:0f:eb:90:2a:5c:23:a6:63:73:
                    0a:08:ec:63:fe:be:69:f5:8f:e3:16:01:9f:72:54:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D3:D9:A5:5A:E2:0F:D3:B7:6A:BB:18:14:64:96:37:F9:72:0D:8F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a383230303a3a2f33392d3339203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:3d:20:c3:b0:02:6e:bd:35:d4:c5:bf:3e:fe:c8:f3:1f:
         67:99:8a:3a:e0:ff:bc:a1:04:65:72:32:4a:53:6f:df:e5:6d:
         ec:b6:27:8e:e3:ab:4e:b2:64:1c:fe:20:be:03:df:70:5c:c2:
         8f:21:fb:40:fd:ba:bc:7e:9c:d4:30:2f:78:85:f3:98:87:9a:
         8f:8a:80:f3:28:5c:03:9b:1b:2f:b1:c8:cf:7d:bf:2b:df:cf:
         87:d0:06:b7:29:69:75:86:15:22:c7:05:44:c2:d4:cb:8d:62:
         17:8b:66:94:e8:76:e5:93:4a:f2:20:5c:76:ce:ee:23:e1:50:
         52:2d:ac:47:71:98:06:ed:42:96:b0:1c:5b:47:a6:68:eb:1f:
         70:6c:1f:ef:92:6a:13:7b:20:b0:c2:13:d2:b7:8b:4a:0b:09:
         d2:c6:a0:65:52:a2:b7:76:5b:55:06:d8:72:06:b8:a9:a3:9d:
         33:c2:00:db:d2:b1:8d:ab:0e:17:1d:8b:58:77:69:85:38:f9:
         ed:de:75:50:84:17:9e:e6:02:a8:6f:83:b3:7b:39:3f:c1:18:
         fc:57:d5:0b:72:2a:e5:8e:a5:5d:39:80:e2:d2:6d:29:31:3b:
         36:c0:12:f0:b3:ad:cb:55:ce:70:82:5f:d9:15:63:75:d1:16:
         40:fc:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----